Based on settings in the firmware, it is another Thompson based product. The advanced UPnP settings showing on the router is something which Thompson appears to have released, but I can't find any other manufacturer that has released it.

My guess, another linux based (probably busybox) OS on the hub with WAN interface port knocking to allow firmware updates through (hence a port scan from the outside looks a little chaotic!!). As to the model, couldn't say yet, but investigating.

Interestingly for the fibre optic service, an openreach vDSL2 modem is installed. This has SNMP active, and can be seen on the LAN2 interface, but can't be queried. Maybe usefult to get line stats and other information that you would expect from any vDSL modem.

Maybe time to start getting this hub unlocked and actually have some useful configuration settings?